| #2001 | Collapsing Categories | 68 | 29 | 8 | 4k+ | | | Missing direct file access protection |
| #2002 | Chatbot for WordPress by Collect.chat ⚡️ | 38 | 58 | 36 | 6k+ | | | Unsafe printing function |
| #2003 | Color and Image Swatches for Variable Product Attributes | 32 | 173 | 111 | 900 | | | Output is not escaped |
| #2004 | Ultimate WooCommerce Filters | 32 | 322 | 207 | 600 | | | Unsafe printing function |
| #2005 | Color Mobile Browser Address Bar | 88 | 5 | 0 | 2k+ | | | Output is not escaped |
| #2006 | Color Your Bar | 77 | 5 | 10 | 400 | | | Input is not sanitized |
| #2007 | Colorbox Panels & Info Box | 31 | 392 | 182 | 1k+ | | | Non Singular String Literal Domain |
| #2008 | Colored Admin Post List | 75 | 8 | 0 | 500 | | | Heredoc Output Not Escaped |
| #2009 | Colorful Categories | 41 | 20 | 20 | 2k+ | | | Output is not escaped |
| #2010 | Colorize Mobile Browser Address bar | 69 | 26 | 3 | 1k+ | | | Output is not escaped |
| #2011 | Colorlib 404 Customizer | 38 | 65 | 15 | 5k+ | | | Missing direct file access protection |
| #2012 | Custom Login Page Customizer | 95 | 3 | 55 | 50k+ | | | Non-prefixed global variable |
| #2013 | ColorMeShop WordPress Plugin | 36 | 392 | 37 | 600 | | | Exception output is not escaped |
| #2014 | Column Ordering For Elementor | 81 | 21 | 6 | 1k+ | | | Text Domain Mismatch |
| #2015 | Column Separator for Beaver Builder | 62 | 61 | 17 | 400 | | | Output is not escaped |
| #2016 | Column Shortcodes | 53 | 32 | 9 | 60k+ | | | Unsafe printing function |
| #2017 | Columns | 99 | 2 | 1 | 3k+ | | | Missing Version |
| #2018 | Columns Alignment Fix for Elementor | 99 | 1 | 0 | 400 | | | outdated tested upto header |
| #2019 | Columns Reordering For Elementor | 97 | 4 | 2 | 900 | | | Missing direct file access protection |
| #2020 | Comet Cache | 21 | 857 | 245 | 20k+ | | | Output is not escaped |
| #2021 | Comfortable Reading | 71 | 16 | 8 | 1k+ | | | Output is not escaped |
| #2022 | Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode | 25 | 99 | 1,040 | 700k+ | | | Non-prefixed global variable |
| #2023 | Coming Soon Badges for WooCommerce | 99 | 1 | 0 | 1k+ | | | outdated tested upto header |
| #2024 | Coming soon and Maintenance mode | 44 | 14 | 43 | 9k+ | | | Request data is not unslashed |
| #2025 | Coming Soon Products for WooCommerce | 99 | 3 | 0 | 600 | | | wp function not compatible with requires wp |
| #2026 | Coming Soon, Under Construction & Maintenance Mode By Dazzler | 36 | 173 | 132 | 6k+ | | | Text Domain Mismatch |
| #2027 | Comment Approved | 68 | 6 | 14 | 500 | | | Input is not sanitized |
| #2028 | Comment Approved Notifier Extended | 74 | 5 | 10 | 500 | | | Output is not escaped |
| #2029 | Comment Blacklist Manager | 64 | 14 | 8 | 600 | | | Output is not escaped |
| #2030 | Comment Blacklist Updater | 42 | 45 | 15 | 1k+ | | | Output is not escaped |
| #2031 | Comment Email Reply | 98 | 6 | 2 | 600 | | | Text Domain Mismatch |
| #2032 | Advanced Comment Form | 64 | 68 | 6 | 4k+ | | | Output is not escaped |
| #2033 | Comment Form CSRF Protection | 70 | 7 | 10 | 500 | | | Request data is not unslashed |
| #2034 | Comment Form Js Validation | 70 | 23 | 8 | 2k+ | | | Missing Arg Domain |
| #2035 | Comment Form WP – Customize Default Comment Form | 61 | 39 | 7 | 600 | | | Output is not escaped |
| #2036 | Comment Image | 44 | 19 | 23 | 1k+ | | | Output is not escaped |
| #2037 | Comment Link Remove and Other Comment Tools | 27 | 691 | 132 | 7k+ | | | Text Domain Mismatch |
| #2038 | Comment Moderation/Notification Recipients | 98 | 2 | 7 | 1k+ | | | Non-prefixed global variable |
| #2039 | Comment Notifier | 48 | 10 | 55 | 400 | | | Non-prefixed global variable |
| #2040 | Lightweight Subscribe To Comments | 37 | 105 | 70 | 1k+ | | | Unsafe printing function |
| #2041 | Comment Reply Email | 42 | 21 | 23 | 500 | | | Unsafe printing function |
| #2042 | Comment Reply Email Notification | 43 | 44 | 19 | 3k+ | | | Output is not escaped |
| #2043 | Comment Validation | 95 | 8 | 5 | 700 | | | Missing Version |
| #2044 | Comments Form Star Rating Plugin for WordPress | 84 | 3 | 10 | 2k+ | | | Missing nonce verification |
| #2045 | Social comments by WpDevArt | 66 | 9 | 19 | 8k+ | | | Missing Version |
| #2046 | Comments Import & Export | 85 | 112 | 9 | 2k+ | | | wp function not compatible with requires wp |
| #2047 | Comments Like Dislike | 41 | 172 | 20 | 5k+ | | | Non Singular String Literal Domain |
| #2048 | Disable Comments & Delete All Comments | 25 | 503 | 185 | 9k+ | | | Output is not escaped |
| #2049 | Comments Shortcode | 98 | 3 | 1 | 900 | | | Missing direct file access protection |
| #2050 | Coinbase Business Gateway for WooCommerce | 25 | 569 | 1,317 | 800 | | | Non-prefixed global variable |